CVE-2020-36607
published 2022-12-15CVE-2020-36607: Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
PriorityP423medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.64%
46.0th percentile
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| feehi | feehicms | — | — |
| feehi | feehicms | 0 – 2.0.8 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
FeehiCMS Cross Site Scripting vulnerability
osv·2022-12-15
CVE-2020-36607 [MEDIUM] FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Cross Site Scripting vulnerability
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
GHSA
FeehiCMS Cross Site Scripting vulnerability
ghsa·2022-12-15
CVE-2020-36607 [MEDIUM] CWE-79 FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Cross Site Scripting vulnerability
Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-15
Published